Which two actions in the IKE Gateways will allow implementation of post-quantum cryptography when building VPNs between multiple Palo Alto Networks NGFWs? (Choose two.)

Question

Options

• ASelect IKE v2, enable the Advanced Options - PQ PPK, then set a 64+ character string for the
• BEnsure Authentication is set to "certificate," then import a post-quantum derived certificate.
• CSelect IKE v2 Preferred, enable the Advanced Options - PQ KEM, then add one or more
• DSelect IKE v2, enable the Advanced Options - PQ KEM, then create an IKE Crypto Profile with

• A
  21% (6)
• B
  10% (3)
• C
  69% (20)

Explanation

To implement post-quantum cryptography (PQC) in VPNs between Palo Alto Networks NGFWs, you would enable the PQ KEM (Post-Quantum Key Encapsulation Mechanism) in the IKE gateway configuration. This enables the firewall to use quantum-resistant encryption for key exchange, which is an essential part of securing communications against the potential future threats posed by quantum computing. By selecting IKE v2 Preferred and enabling the PQ KEM option under Advanced Options, you can add specific Rounds for the post-quantum cryptography process, which will help in implementing quantum-resistant key exchange methods. This option similarly selects IKE v2 and enables PQ KEM while also creating a dedicated IKE Crypto Profile with the necessary Rounds configured for post-quantum cryptography.

No community discussion yet for this question.